Test ID:	1.3.6.1.4.1.25623.1.0.815228
Category:	General
Title:	Foxit PhantomPDF < 8.3.8, 9.x < 9.3 Multiple Vulnerabilities (Jun 2019) - Windows
Summary:	Foxit PhantomPDF is prone to multiple vulnerabilities.
Description:	Summary: Foxit PhantomPDF is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An issue in handling of the setItems method of a ComboBox resulting in lack of validating the existence of an object prior to performing operations on the object. - An issue in handling of the fillColor property of a radio button resulting from lack of validating the existence of an object prior to performing operations on the object. - An issue in handling of Array.prototype.concat resulting from lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. Vulnerability Impact: Successful exploitation allows remote attackers to execute arbitrary code. Affected Software/OS: Foxit PhantomPDF versions before 8.3.7.38094 and 9.x to 9.2.0.9297 on Windows. Solution: Update to version 8.3.8, 9.3 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-17687 https://www.zerodayinitiative.com/advisories/ZDI-18-1169/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17688 https://www.zerodayinitiative.com/advisories/ZDI-18-1155/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17689 https://www.zerodayinitiative.com/advisories/ZDI-18-1205/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17690 https://www.zerodayinitiative.com/advisories/ZDI-18-1161/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17691 https://www.zerodayinitiative.com/advisories/ZDI-18-1167/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17692 https://www.zerodayinitiative.com/advisories/ZDI-18-1176/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17693 https://www.zerodayinitiative.com/advisories/ZDI-18-1182/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17694 https://www.zerodayinitiative.com/advisories/ZDI-18-1224/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17695 https://www.zerodayinitiative.com/advisories/ZDI-18-1199/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17698 https://www.zerodayinitiative.com/advisories/ZDI-18-1219/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17700 https://www.foxitsoftware.com/support/security-bulletins.php https://www.zerodayinitiative.com/advisories/ZDI-18-1146/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17701 https://www.zerodayinitiative.com/advisories/ZDI-18-1147/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17706 https://zerodayinitiative.com/advisories/ZDI-18-1095
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.